Path traversal.

extract-zip allows arbitrary file writes through symlink archive entries

• Path traversal

<=2.0.1 · no fixed version yet

Path traversal in Dell ObjectScale

• Dell ObjectScale
• Path traversal

Path traversal in Dell ObjectScale

• Dell ObjectScale
• Path traversal

Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller

• Progress ShareFile Storage Zones Controller
• Path traversal
• Unrestricted file upload

Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution

• Progress ShareFile Storage Zones Controller
• Path traversal
• CWE-20

openssl_encrypt versions before 1.4.0 contain a path traversal vulnerability in the _is_safe_path method where the plugin_id parameter is not sanitized before constructing the plugin config directo...

• Path traversal

<1.4.0 · fixed in 1.4.0

SiYuan kernel Path Traversal via database_clean MCP tool

• siyuan
• Path traversal

Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint

• Path traversal

Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code.

• Path traversal

Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated.

• Path traversal

Kirki <= 6.1.1 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'data' Parameter

• themeum Kirki – Freeform Page Builder, Website Builder & Customizer
• Path traversal

WPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect

• WPvivid — Backup, Migration & Staging
• Path traversal

StoreEngine <= 2.1.1 - Authenticated (Vendor+) Arbitrary File Read via Path Traversal in Downloadable File URL

• kodezen StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More
• Path traversal

ProSolution WP Client <= 2.0.8 - Unauthenticated Arbitrary File Deletion via 'newfilename' and 'filename' Parameters

• ProSolution WP Client
• Path traversal

Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora

• pandora
• Path traversal

Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter

• jackdewey Link Library
• Path traversal

RapiSafe <= 1.0.4 - Unauthenticated Arbitrary File Deletion via 'rsmfcf7_session' and 'file_name' Parameters

• pietror91 RapiSafe – Secure Multi File Upload for Contact Form 7
• Path traversal

Microsoft Defender Elevation of Privilege Vulnerability

• Microsoft Malware Protection Engine
• Path traversal
• Privilege escalation

Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints

• Path traversal

<5.1.0 · fixed in 5.1.0

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

• PAX Technology Q80
• Path traversal

Airwall - Arbitrary file read

• Johnson Controls Airwall
• Path traversal

IBM Db2 Mirror for i is affected by multiple vulnerabilities

• IBM Db2 Mirror for i
• Path traversal

IBM Db2 Mirror for i is affected by multiple vulnerabilities

• IBM Db2 Mirror for i
• Path traversal

IBM Db2 Mirror for i is affected by multiple vulnerabilities

• IBM Db2 Mirror for i
• Path traversal

IBM Db2 Mirror for i is affected by multiple vulnerabilities

• IBM Db2 Mirror for i
• Path traversal

IBM Db2 Mirror for i is affected by multiple vulnerabilities

• IBM Db2 Mirror for i
• Path traversal

IBM Db2 Mirror for i is affected by multiple vulnerabilities

• IBM Db2 Mirror for i
• Path traversal

IBM Db2 Mirror for i is affected by multiple vulnerabilities

• IBM Db2 Mirror for i
• Path traversal

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad

• KUNBUS RevPiPyLoad
• Path traversal

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad

• KUNBUS RevPiPyLoad
• Path traversal

Incomplete protection against CVE-2025-11226

• QOS.CH Sarl Logback-classic
• Path traversal

648540858 wvp-GB28181-pro Log File Download Endpoint LogController.java path traversal

• 648540858 wvp-GB28181-pro
• Path traversal

648540858 wvp-GB28181-pro Snapshot Endpoint PlayController.java path traversal

• 648540858 wvp-GB28181-pro
• Path traversal

alldatacenter alldata logDetailCat Endpoint JobLogController.java FileInputStream path traversal

• alldata
• Path traversal

Grav 2.0.11 Path Traversal via Backup Profile Configuration

• grav
• Path traversal

DTStack Taier Cluster Creation ClusterController.java FileUtils.deleteDirectory path traversal

• DTStack Taier
• Path traversal

DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal

• DTStack Taier
• Path traversal

DTStack Taier Upload Controller UploadController.java MultipartFile.getOriginalFilename path traversal

• DTStack Taier
• Path traversal

dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal

• dromara lamp-cloud
• Path traversal

Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal

• Dromara lamp-cloud
• Path traversal

Dromara lamp-cloud Code Generator DefGenProjectController.java path traversal

• Dromara lamp-cloud
• Path traversal

Budibase before 3.40.0 Arbitrary File Write via Path Traversal

• budibase server
• Path traversal

OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass

• openwrt luci
• Path traversal

luci-app-openvpn Path Traversal RCE via instance_name2

• openwrt luci
• Path traversal

Trigger.dev: Cross-tenant object read/write via path traversal in packet presign API

• triggerdotdev trigger.dev
• Path traversal

Trigger.dev: Cross-tenant object store read and write via URL path traversal

• triggerdotdev trigger.dev
• Path traversal
• Broken access control

Trigger.dev: Cross-tenant payload poisoning via packet write + replay

• triggerdotdev trigger.dev
• Path traversal
• Broken access control

IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

• IBM Documentation Offline
• Path traversal

IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

• IBM Documentation Offline
• Path traversal

IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

• i
• Path traversal

IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

• i
• Path traversal

IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

• i
• Path traversal

IBM i is Affected By An Improper Validation Vulnerability in PASE []

• i
• Path traversal

IBM i is Affected By Multiple SQL Vulnerabilities [, ]

• i
• Path traversal

IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service

• i
• Path traversal

Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources

• Elastic Kibana
• Path traversal

CyberPanel < 3.0.0 Path Traversal File Read via cloudAPI ReadReport

• usmannasir cyberpanel
• Path traversal

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catal…

• Path traversal
• Code injection

Path traversal in Zimbra Collaboration

• Zimbra Collaboration
• Path traversal

Symlink following in Lenovo Commercial Vantage and others

• Lenovo Commercial Vantage
• Lenovo Vantage
• Path traversal